[Zope-dev] Basic LoginManager HowTo

2000-06-02 Thread Bill Anderson 

Has anyone out there actually sarted _using_ LoginManager with ZODB
storage? IOW, one that is not dependant on LDAP/SQL/etc., but that is
functioning in place of a non-PTK acl_users folder? 

I am starting to play with it (so many toys, so little time...), and
would like to see (if it exists) a basic walkthrough of how to go from:
Folder with no userfolder, LM installed 
  -to-
Folder with LM-acl_users folder, and ZODB member storage.

So, what about it? Anyone got one, or at least could write down the
steps/requirements?

Much Appreciated, 
Bill

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )

Re: [Zope-dev] Basic LoginManager HowTo

2000-06-02 Thread Lalo Martins 

On Fri, Jun 02, 2000 at 07:29:18PM -0600, Bill Anderson wrote:
 Has anyone out there actually sarted _using_ LoginManager with ZODB
 storage? IOW, one that is not dependant on LDAP/SQL/etc., but that is
 functioning in place of a non-PTK acl_users folder? 

I tried. It's quite easy, except that you have to store the
user's password in a property, and access control is somewhat
broken WRT passwords, so anyone can read anyone's passwords if
they can write DTML.

Now I don't plan to just let anyone write DTML, but I don't
want to leave this hole open because I know I will forget it
sooner or later and open up an exploit.

[]s,
   |alo
   +
--
  Hack and Roll  ( http://www.hackandroll.org )
News for, uh, whatever it is that we are.


http://zope.gf.com.br/lalo   mailto:[EMAIL PROTECTED]
 pgp key: http://zope.gf.com.br/lalo/pessoal/pgp

Brazil of Darkness (RPG)--- http://zope.gf.com.br/BroDar

___
Zope-Dev maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope )